Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/H_rPtQXdL7iR9BaeGuZZ55T42HU.roa
File: H_rPtQXdL7iR9BaeGuZZ55T42HU.roa (raw, json)
Hash identifier: F6jNt3doqOXQMFkimOu8rzP3jVoAXF19RtRFGeOypFA=
Subject key identifier: 1F:FA:CF:B5:05:DD:2F:B8:91:F4:16:9E:1A:E6:59:E7:94:F8:D8:75
Certificate issuer: /CN=889b73d4ce9453b7b431f92c46e429b8f6dc9a26
Certificate serial: 01A140E82B30784E0B0ED98417F1971E8B51
Authority key identifier: 88:9B:73:D4:CE:94:53:B7:B4:31:F9:2C:46:E4:29:B8:F6:DC:9A:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iJtz1M6UU7e0MfksRuQpuPbcmiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/H_rPtQXdL7iR9BaeGuZZ55T42HU.roa
Signing time: Thu 15 Oct 2026 18:51:59 +0000
ROA not before: Thu 15 Oct 2026 18:51:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203239
IP address blocks: 2a0d:1e00::/48 maxlen: 48
2a0d:1e00:46::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/iJtz1M6UU7e0MfksRuQpuPbcmiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/iJtz1M6UU7e0MfksRuQpuPbcmiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iJtz1M6UU7e0MfksRuQpuPbcmiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 04:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:e8:2b:30:78:4e:0b:0e:d9:84:17:f1:97:1e:8b:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=889b73d4ce9453b7b431f92c46e429b8f6dc9a26
Validity
Not Before: Oct 15 18:51:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1ffacfb505dd2fb891f4169e1ae659e794f8d875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:aa:c3:e1:57:b5:82:36:cb:ed:4b:af:21:b9:
a6:a9:82:c2:90:ee:57:06:ac:78:7f:f8:87:97:5d:
76:e2:6c:c7:45:f7:ea:b9:d6:f5:82:22:a3:72:6c:
71:0c:01:a8:b6:e6:49:6e:f7:87:26:dd:d7:0e:ea:
30:3b:c0:ff:1d:73:52:f1:8a:93:5f:bd:6f:e2:77:
3b:df:cb:23:96:e2:a2:d0:97:33:fb:36:ff:dc:6b:
49:57:dc:43:30:27:2b:aa:ad:5c:8a:62:f1:33:bc:
cc:30:9a:e6:3b:07:3d:7c:6b:e4:e6:39:97:c4:07:
bf:3e:c7:f4:05:53:6b:0c:5c:1f:b2:66:bc:18:59:
1c:79:89:e6:db:a7:49:a9:49:5a:e9:60:e5:a9:2b:
4a:27:3b:2f:62:03:60:a2:4c:00:84:bb:a4:61:6e:
19:2a:7f:f6:d7:b7:10:74:da:04:7e:36:50:56:74:
15:2e:9c:a4:9f:25:09:de:00:cb:16:56:25:2d:07:
61:e4:03:e1:b0:60:83:2b:a5:fb:7b:f0:71:01:4e:
af:1a:72:5f:0c:09:0c:59:bc:04:e4:96:0c:32:38:
c2:b6:3f:eb:00:82:bc:75:bb:a7:a3:11:2f:95:bf:
67:3b:58:69:86:a8:28:75:e1:e0:b1:43:71:2b:ea:
ed:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:FA:CF:B5:05:DD:2F:B8:91:F4:16:9E:1A:E6:59:E7:94:F8:D8:75
X509v3 Authority Key Identifier:
keyid:88:9B:73:D4:CE:94:53:B7:B4:31:F9:2C:46:E4:29:B8:F6:DC:9A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iJtz1M6UU7e0MfksRuQpuPbcmiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/H_rPtQXdL7iR9BaeGuZZ55T42HU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/iJtz1M6UU7e0MfksRuQpuPbcmiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:1e00::/48
2a0d:1e00:46::/48
Signature Algorithm: sha256WithRSAEncryption
0e:1b:04:83:6c:6c:d9:b0:fb:91:cd:f8:af:03:f3:8a:cf:17:
1d:48:97:9d:91:86:c4:bf:17:14:3d:09:da:a0:48:43:15:2b:
9e:57:0d:89:0e:ff:01:15:c6:13:b1:19:bb:9e:65:5d:c9:33:
1c:f9:d2:44:c3:72:7a:fe:67:75:4c:d3:21:df:cb:a9:ba:f7:
2a:37:f3:9e:84:1d:b6:ab:c1:2e:87:a9:cd:ce:12:4a:eb:66:
46:23:8a:e8:1a:fe:92:b8:6b:a7:fa:1e:82:80:0d:34:27:8a:
cb:41:01:86:c8:80:fb:a8:4e:dd:31:d0:9f:a6:77:ee:40:8b:
16:0a:49:f9:c9:9d:72:36:34:93:aa:1c:36:e5:85:38:63:14:
31:1f:83:4b:84:a1:f1:ed:2a:dd:16:73:f4:22:23:ba:9a:50:
a3:67:17:7e:2b:51:69:dc:b5:10:33:f8:e3:ed:e8:1e:36:31:
74:41:c1:a3:e6:84:1b:11:59:f6:e9:f6:9b:fe:87:2c:bd:81:
8a:40:6a:9e:91:5d:b2:6f:88:fc:6b:bc:03:66:91:27:78:40:
73:0b:85:e6:0a:61:94:d3:02:53:ce:e3:ec:59:f8:6b:3f:21:
29:7e:f4:54:96:11:e7:12:b8:31:0e:18:a9:3b:21:c9:1e:ad:
59:e8:63:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:32:31 2026 by rpki-client